⤷ Title: The Hacker Didn’t Break In… He logged in
════════════════════════
𐀪 Author: Devarshi Acharya
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:51:35 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #technology #cybercrime #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Devarshi Acharya
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:51:35 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #technology #cybercrime #penetration_testing #cybersecurity
Medium
The Hacker Didn’t Break In… He logged in
A company once believed its systems were secure.
⤷ Title: Cyber Security Engineer Course: A Practical Guide for Beginners
════════════════════════
𐀪 Author: Google Red Teaming
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:55:00 GMT
════════════════════════
⌗ Tags: #cyber_attack_courses #penetration_testing #cybersecurity_for_beginne #pentesting #cybersecurity_engineer
════════════════════════
𐀪 Author: Google Red Teaming
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:55:00 GMT
════════════════════════
⌗ Tags: #cyber_attack_courses #penetration_testing #cybersecurity_for_beginne #pentesting #cybersecurity_engineer
Medium
Cyber Security Engineer Course: A Practical Guide for Beginners
Cybersecurity has become a critical priority for organizations of every size. As businesses move their applications, infrastructure, and…
⤷ Title: Penetration Testing, Red Teaming, and Purple Teaming: A Practical Guide for Security Leaders
════════════════════════
𐀪 Author: Lakshita Gulliya
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:10:56 GMT
════════════════════════
⌗ Tags: #enterprise_security #penetration_testing #cyber_security_awareness #mitre_attack #threat_detection
════════════════════════
𐀪 Author: Lakshita Gulliya
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:10:56 GMT
════════════════════════
⌗ Tags: #enterprise_security #penetration_testing #cyber_security_awareness #mitre_attack #threat_detection
Medium
Penetration Testing, Red Teaming, and Purple Teaming: A Practical Guide for Security Leaders
Most companies find out the hard way that a security test they paid for didn’t answer the question they actually needed answered. They…
⤷ Title: TryHackMe |Agent Design
════════════════════════
𐀪 Author: Qaevix
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:34:01 GMT
════════════════════════
⌗ Tags: #ai #technology #cybersecurity #information_security #tryhackme
════════════════════════
𐀪 Author: Qaevix
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:34:01 GMT
════════════════════════
⌗ Tags: #ai #technology #cybersecurity #information_security #tryhackme
Medium
TryHackMe |Agent Design
https://tryhackme.com/room/agentdesign
⤷ Title: The Return of the Yeti — TryhackmeWrite-up
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:54:48 GMT
════════════════════════
⌗ Tags: #wireshark #decryption #encryption #tryhackme
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:54:48 GMT
════════════════════════
⌗ Tags: #wireshark #decryption #encryption #tryhackme
Medium
The Return of the Yeti — TryhackmeWrite-up
Solution:
⤷ Title: How a Cyber Security Diploma Course Can Support Your Career Goals
════════════════════════
𐀪 Author: cybersecuritycourse
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:41:48 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity_training #cybersecurity #ethical_hacking #education
════════════════════════
𐀪 Author: cybersecuritycourse
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:41:48 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity_training #cybersecurity #ethical_hacking #education
Medium
How a Cyber Security Diploma Course Can Support Your Career Goals
Cybersecurity has become one of the most important areas of the modern technology industry. Businesses, government organizations, banks…
⤷ Title: Vegeta Walkthrough | Proving Ground Machine | Oscp Prep
════════════════════════
𐀪 Author: Cybersecurity writeup's
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 05:58:10 GMT
════════════════════════
⌗ Tags: #ethical_hacking #oscp #cybersecurity #linux #pentesting
════════════════════════
𐀪 Author: Cybersecurity writeup's
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 05:58:10 GMT
════════════════════════
⌗ Tags: #ethical_hacking #oscp #cybersecurity #linux #pentesting
Medium
Vegeta Walkthrough | Proving Ground Machine | Oscp Prep
Lab Description
⤷ Title: SQL Injection to RCE: Understanding the Attack Chain
════════════════════════
𐀪 Author: Vibecyberv
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:03:54 GMT
════════════════════════
⌗ Tags: #rce #cybersecurity #attack #vapt #sql_injection
════════════════════════
𐀪 Author: Vibecyberv
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:03:54 GMT
════════════════════════
⌗ Tags: #rce #cybersecurity #attack #vapt #sql_injection
Medium
SQL Injection to RCE: Understanding the Attack Chain
In 2017, Equifax lost the personal data of 147 million people. In 2008, Heartland Payment Systems leaked over 130 million card numbers…
⤷ Title: Hunting Open Redirects: My Practical Methodology for Web Application Testing
════════════════════════
𐀪 Author: chalampalem Neeraja
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:30:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #bug_bounty_tips #happyhunting #vapt
════════════════════════
𐀪 Author: chalampalem Neeraja
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:30:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #bug_bounty_tips #happyhunting #vapt
Medium
Hunting Open Redirects: My Practical Methodology for Web Application Testing
Introduction
👏2
Forwarded from Bug Bounty Diary
✎ Extract & Download All JavaScript Files for Recon
For modern web apps, scraping
My Approach:
1. Open DevTools → Network
2. Enable Preserve log
3. Crawl the target and visit relevant pages/features
4. Interact with the application to trigger dynamic resources
5. Export the traffic as a HAR
6. Extract all JavaScript files from
#bugbounty #javascript #recon
© T.me/BugBounty_Diary
For modern web apps, scraping
<script> tags or relying on Burp's Site Map often isn't enough. Why? Because applications may dynamically load JavaScript from CDNs, cross-origin domains, specific routes (Lazy Loading), or after user interactions.My Approach:
1. Open DevTools → Network
2. Enable Preserve log
3. Crawl the target and visit relevant pages/features
4. Interact with the application to trigger dynamic resources
5. Export the traffic as a HAR
6. Extract all JavaScript files from
.HAR file using unhar (I'll talk about it in the next post.)#bugbounty #javascript #recon
© T.me/BugBounty_Diary
❤1
Forwarded from Bug Bounty Diary
✎ Unhar - Extract, Unminify, Beautify Javascript files from .Har file
In the previous post, I explained my approach to capturing and downloading a website’s JavaScript resources into a
unhar turns a raw
In short: HAR → Extract → Source Maps → Beautify → Ready for Analysis
● Installation
● Usage
• Repository: Github
#bugbounty #javascript #recon
© T.me/BugBounty_Diary
In the previous post, I explained my approach to capturing and downloading a website’s JavaScript resources into a
.HAR file for further local analysis. Now, let’s take it a step further with unhar and process that HAR files. unhar turns a raw
.HAR file into a structured set of web assets for local analysis. It extracts unique JavaScript and HTML resources while preserving the original URL structure, fetches available source maps, beautifies/unminifies JavaScript, and extracts inline scripts from HTML pages.In short: HAR → Extract → Source Maps → Beautify → Ready for Analysis
● Installation
git clone https://github.com/Spix0r/unhar
cd unhar
● Usage
# custom output directory
python3 unhar.py site.har --output folder
# skip source map fetching
python3 unhar.py site.har --no-srcmap
# skip beautify
python3 unhar.py site.har --no-beautify
• Repository: Github
#bugbounty #javascript #recon
© T.me/BugBounty_Diary